Bump the npm_and_yarn group with 6 updates #75
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the npm_and_yarn group with 8 updates: | Package | From | To | | --- | --- | --- | | [semver](https://github.com/npm/node-semver) | `6.3.0` | `7.7.1` | | [semver](https://github.com/npm/node-semver) | `7.3.5` | `7.7.1` | | [semver](https://github.com/npm/node-semver) | `5.7.1` | `7.7.1` | | [micromatch](https://github.com/micromatch/micromatch) | `4.0.4` | `4.0.8` | | [braces](https://github.com/micromatch/braces) | `3.0.2` | `3.0.3` | | [cross-spawn](https://github.com/moxystudio/node-cross-spawn) | `7.0.3` | `7.0.6` | | [minimatch](https://github.com/isaacs/minimatch) | `3.0.4` | `3.1.2` | | [json5](https://github.com/json5/json5) | `1.0.1` | `1.0.2` | Updates `semver` from 6.3.0 to 7.7.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v7.7.1) Updates `semver` from 7.3.5 to 7.7.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v7.7.1) Updates `semver` from 5.7.1 to 7.7.1 - [Release notes](https://github.com/npm/node-semver/releases) - [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) - [Commits](npm/node-semver@v6.3.0...v7.7.1) Updates `micromatch` from 4.0.4 to 4.0.8 - [Release notes](https://github.com/micromatch/micromatch/releases) - [Changelog](https://github.com/micromatch/micromatch/blob/master/CHANGELOG.md) - [Commits](micromatch/micromatch@4.0.4...4.0.8) Updates `braces` from 3.0.2 to 3.0.3 - [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md) - [Commits](micromatch/braces@3.0.2...3.0.3) Updates `cross-spawn` from 7.0.3 to 7.0.6 - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6) Updates `minimatch` from 3.0.4 to 3.1.2 - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](isaacs/minimatch@v3.0.4...v3.1.2) Updates `json5` from 1.0.1 to 1.0.2 - [Release notes](https://github.com/json5/json5/releases) - [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md) - [Commits](json5/json5@v1.0.1...v1.0.2) --- updated-dependencies: - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: semver dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: micromatch dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: braces dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: cross-spawn dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: minimatch dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: json5 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the npm_and_yarn group with 8 updates:
6.3.07.7.17.3.57.7.15.7.17.7.14.0.44.0.83.0.23.0.37.0.37.0.63.0.43.1.21.0.11.0.2Updates
semverfrom 6.3.0 to 7.7.1Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
30c438bchore: release 7.7.1 (#765)af761c0fix(inc): fully capture prerelease identifier (#764)2cfcbb5chore: release 7.7.0 (#750)d588e37fix(diff): fix prerelease to stable version diff logic (#755)753e02bchore: bump@npmcli/template-ossfrom 4.23.3 to 4.23.4 (#747)8a34bdefix: add identifier validation toinc()(#754)0864b3cfeat: add "release" inc type (#753)67e5478docs(readme): added missing period for consistency (#756)868d4bbdocs: clarify comment about obsolete prefixes (#749)145c554chore: bump@npmcli/eslint-configfrom 4.0.5 to 5.0.0Maintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
semverfrom 7.3.5 to 7.7.1Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
30c438bchore: release 7.7.1 (#765)af761c0fix(inc): fully capture prerelease identifier (#764)2cfcbb5chore: release 7.7.0 (#750)d588e37fix(diff): fix prerelease to stable version diff logic (#755)753e02bchore: bump@npmcli/template-ossfrom 4.23.3 to 4.23.4 (#747)8a34bdefix: add identifier validation toinc()(#754)0864b3cfeat: add "release" inc type (#753)67e5478docs(readme): added missing period for consistency (#756)868d4bbdocs: clarify comment about obsolete prefixes (#749)145c554chore: bump@npmcli/eslint-configfrom 4.0.5 to 5.0.0Maintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
semverfrom 5.7.1 to 7.7.1Release notes
Sourced from semver's releases.
... (truncated)
Changelog
Sourced from semver's changelog.
... (truncated)
Commits
30c438bchore: release 7.7.1 (#765)af761c0fix(inc): fully capture prerelease identifier (#764)2cfcbb5chore: release 7.7.0 (#750)d588e37fix(diff): fix prerelease to stable version diff logic (#755)753e02bchore: bump@npmcli/template-ossfrom 4.23.3 to 4.23.4 (#747)8a34bdefix: add identifier validation toinc()(#754)0864b3cfeat: add "release" inc type (#753)67e5478docs(readme): added missing period for consistency (#756)868d4bbdocs: clarify comment about obsolete prefixes (#749)145c554chore: bump@npmcli/eslint-configfrom 4.0.5 to 5.0.0Maintainer changes
This version was pushed to npm by npm-cli-ops, a new releaser for semver since your current version.
Updates
micromatchfrom 4.0.4 to 4.0.8Release notes
Sourced from micromatch's releases.
Changelog
Sourced from micromatch's changelog.
... (truncated)
Commits
8bd704e4.0.8a0e6841run verb to generate README documentation4ec2884Merge branch 'v4' into hauserkristof-feature/v4.0.803aa805Merge pull request #266 from hauserkristof/feature/v4.0.8814f5f7lint67fcce6fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5113f2e3fix: CVE numbers in CHANGELOGd9dbd9afeat: updated CHANGELOG2ab1315fix: use actions/setup-node@v41406ea3feat: rework test to work on macos with node 10,12 and 14Updates
bracesfrom 3.0.2 to 3.0.3Commits
74b2db23.0.388f1429update eslint. lint, fix unit tests.415d660Snyk js braces 6838727 (#40)190510ffix tests, skip 1 test in test/braces.expand716eb9freadme bumpa5851e5Merge pull request #37 from coderaiser/fix/vulnerability2092bd1feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cffix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9remove funding file665ab5dupdate keepEscaping doc (#27)Updates
cross-spawnfrom 7.0.3 to 7.0.6Changelog
Sourced from cross-spawn's changelog.
Commits
77cd97fchore(release): 7.0.66717de4chore: upgrade standard-versionf700743fix: update cross-spawn version to 7.0.5 in package-lock.json9a7e3b2chore: fix build status badge0852683chore(release): 7.0.5640d391fix: fix escaping bug introduced by backtrackingbff0c87chore: remove codecova7c6abcchore: replace travis with github workflows9b9246echore(release): 7.0.45ff3a07fix: disable regexp backtracking (#160)Updates
minimatchfrom 3.0.4 to 3.1.2Commits
699c4593.1.22f2b5fffix: trim pattern25d7c0d3.1.155dda29fix: treat nocase:true as always having magic